From 09bbff282de52f71196ce5ee7ecd516591a59cec Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 30 Nov 2022 01:38:40 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-SINATRA-3150405 --- Gemfile | 2 +- Gemfile.lock | 20 ++++++++++---------- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/Gemfile b/Gemfile index a6cfe07..f7b3f4e 100644 --- a/Gemfile +++ b/Gemfile @@ -4,7 +4,7 @@ source "https://rubygems.org" git_source(:github) {|repo_name| "https://github.com/#{repo_name}" } -gem "sinatra", "2.0.1" +gem "sinatra", "2.2.3" gem "puma", "4.2.1" gem 'puma-metrics' diff --git a/Gemfile.lock b/Gemfile.lock index ccc5069..e64c4a3 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -2,7 +2,7 @@ GEM remote: https://rubygems.org/ specs: diff-lcs (1.3) - mustermann (1.1.1) + mustermann (2.0.2) ruby2_keywords (~> 0.0.1) nio4r (2.5.2) prometheus-client (0.10.0) @@ -11,8 +11,8 @@ GEM puma-metrics (1.1.0) prometheus-client (~> 0.10) puma (>= 3.0) - rack (2.2.2) - rack-protection (2.0.1) + rack (2.2.4) + rack-protection (2.2.3) rack rack-test (1.1.0) rack (>= 1.0, < 3) @@ -30,13 +30,13 @@ GEM diff-lcs (>= 1.2.0, < 2.0) rspec-support (~> 3.9.0) rspec-support (3.9.2) - ruby2_keywords (0.0.2) - sinatra (2.0.1) - mustermann (~> 1.0) - rack (~> 2.0) - rack-protection (= 2.0.1) + ruby2_keywords (0.0.5) + sinatra (2.2.3) + mustermann (~> 2.0) + rack (~> 2.2) + rack-protection (= 2.2.3) tilt (~> 2.0) - tilt (2.0.10) + tilt (2.0.11) PLATFORMS ruby @@ -47,7 +47,7 @@ DEPENDENCIES rack-test rake rspec - sinatra (= 2.0.1) + sinatra (= 2.2.3) BUNDLED WITH 2.1.4